How to change the time-out value for a container file scan in Antigen (905971)


The information in this article applies to:

  • Sybari Antigen 8.0 for Microsoft Exchange
  • Sybari Antigen 8.0 for SMTP Gateways
  • Sybari Antigen 7.5 for Microsoft Exchange
  • Sybari Antigen 7.5 for SMTP Gateways
Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

INTRODUCTION

This article describes how to change the time-out value for a container file scan in Sybari Antigen.

MORE INFORMATION

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

If a container file scan takes longer than expected, Antigen stops the scan. Additionally, you may receive the following message: AntigenInternet scan aborted and recovered. When you receive this message, you should examine the container file attachment that caused the scan to be stopped. A container file scan may take longer than expected if the container file is corrupted or is very large.

Antigen stops a container file scan that takes longer than expected to prevent bottlenecks. By default, Antigen 7.5 stops a container file scan if the scan takes longer than eleven minutes. Antigen 8.0 stops a container file scan if the scan longer takes 2 minutes (120,000 milliseconds).

To change the time-out value for a container file scan in Antigen, follow these steps:
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\software\sybari software\Antigen for Exchange

  3. Double-click the MaxScanTime registry entry, and then type the time-out value that you want to use in the Value box.
Because Antigen can stop a scan, you do not have to restart the SMTP service every time that a container file scan takes longer than expected.

You can configure the action that Antigen takes if a container file scan takes longer than expected. To do this, follow these steps:
  1. Start the Sybari Client (SybariClient.exe).
  2. In Shuttle Navigator, click Settings, and then click General Options.
  3. Under Scanning, click one of the following settings under Engine Error Action:
    • Ignore: When you click this setting, Antigen does not log any information about the scan.
    • Skip Detect Only: When you click this setting, Antigen logs information about the scan. However, Antigen does not do anything to the message or to the container file attachment.
    • Delete: When you click this setting, Antigen logs information about the scan. Additionally, Antigen deletes the container file attachment.
Modification Type:MinorLast Reviewed:11/17/2005
Keywords:kbtshoot KB905971
©2004 Microsoft Corporation. All rights reserved.